Description

It was detected that your web application uses HTTP protocol, but doesn't automatically redirect users to HTTPS.

Remediation

It's recommended to implement best practices of HTTP Redirection into your web application. Consult web references for more information

References

HTTP Redirections

Related Vulnerabilities

Multiple Content Security Policy (CSP) Implementation Detected

No SAML Respose signature check

Spring Boot Misconfiguration: Overly long session timeout

Weak Nonce Detected in Content Security Policy (CSP) Declaration

Content Security Policy (CSP) Contains Out of Scope report-uri Domain

Severity

Medium

Classification

CWE-16 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:N/I:N/A:N CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:N/SA:N

Tags

Sensitive Data Not Over Ssl